Wbce Cms Security Vulnerabilities and Issues — Wbce Cms CVE List

Lucene search

WbceWbce Cms

4 matches found

CVE•added 2017/04/28 4:59 p.m.•42 views

CVE-2017-2119

Directory traversal vulnerability in WBCE CMS 1.1.10 and earlier allows remote attackers to read arbitrary files via unspecified vectors.

8.6CVSS8.3AI score0.07421EPSS

CVE•added 2017/04/28 4:59 p.m.•39 views

CVE-2017-2118

Cross-site scripting vulnerability in WBCE CMS 1.1.10 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

6.1CVSS5.5AI score0.00324EPSS

CVE•added 2017/11/17 1:29 a.m.•38 views

CVE-2017-1000213

WBCE v1.1.11 is vulnerable to reflected XSS via the "begriff" POST parameter in /admin/admintools/tool.php?tool=user_search

4.8CVSS4.8AI score0.00235EPSS

CVE•added 2017/04/28 4:59 p.m.•35 views

CVE-2017-2120

SQL injection vulnerability in the WBCE CMS 1.1.10 and earlier allows attacker with administrator rights to execute arbitrary SQL commands via unspecified vectors.

7.2CVSS7.5AI score0.01173EPSS